Privacy Policy
Effective date: 09.12.2025
This Privacy Policy explains how AW Aromatics Ltd (“we”, “us”, “our”) collects, uses, shares, and protects your personal data when you visit or make a purchase from www.agnesandcat.org (the “Website”).
We are committed to complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. Who We Are
AW Aromatics Ltd
Company Number:12796117
Registered Office: Block B Parkwood Business Park, 75 Parkwood Road, Sheffield, South Yorkshire, England, S3 8AL
We act as the Data Controller for the personal data you provide.
Contact details:
Email: [email protected]
Phone: +44 114 267 7723
Contact form: www.agnesandcat.org/contact
2. Personal Data We Collect
We may collect and process the following types of personal information:
Identity & Contact Data
Name
Email address
Telephone number
Billing and delivery address
Order & Transaction Data
Products ordered
Order dates and delivery information
Payment status
Limited payment data (processed securely by our payment providers — we do not store full card details)
Technical & Usage Data
Collected automatically when you browse the Website:
IP address
Browser type and version
Device identifiers
Pages visited and time spent on the Website
Navigation patterns
Error logs and diagnostic information
Marketing & Communication Data
Newsletter and marketing preferences
Email engagement data (opens, clicks)
Cookies & Tracking Data
We use cookies and similar technologies to operate the Website, analyse performance, and enhance user experience.
Full details are provided in the Cookies section below and in our Cookie Policy.
3. How We Use Your Personal Data
We may use your information for the following purposes:
Processing and fulfilling orders
Managing customer accounts
Providing customer service and technical support
Sending essential service updates
Analysing and improving Website performance
Preventing fraud and protecting the Website
Sending marketing communications (where you have opted in)
Meeting legal and financial obligations
We process data under lawful bases such as contract, legitimate interests, legal obligation, and consent.
4. Marketing Communications
If you subscribe to our newsletter or create an account, we may send marketing messages related to:
New product launches
Promotions or offers
Brand news and updates
You can opt out at any time using the unsubscribe link included in every email.
5. Third-Party Sharing
We may share your personal information with trusted third-party service providers who help us operate the Website and deliver our services. Any third party we share your information with must disclose the purpose for which they intend to use your information. They may retain your information only for the duration necessary to fulfil that purpose, and they must not collect, sell, or use your data for any purpose other than what is required to perform the service.
Your information may be shared for purposes including:
Analytics information: To track and analyse website traffic through tools such as Google Analytics.
Payment processing and recovery services: To process purchases, refunds, chargebacks, or similar transactions.
Marketing initiatives: To create and send newsletters, marketing emails, and advertising campaigns.
Improving targeted advertising: Aromatics partners with trusted advertising providers to improve the relevance of ads shown to you.
Improving our Service: To host, maintain, enhance, or secure the Website and customer experience through specialist providers.
If you provide information during registration or account creation, you grant Aromatics permission to store, use, and share that information in accordance with this Privacy Policy.
Your information may also be disclosed for additional legal reasons:
Complying with laws, regulations, or court orders
Responding to complaints or claims that your use of the Service violates third-party rights
Enforcing agreements you enter into with us, including this Privacy Policy
We do not sell personal data.
6. International Data Transfers
Some service providers operate outside the UK (for example, in the EU or United States).
Where data is transferred internationally, we ensure that appropriate safeguards are used, such as:
UK adequacy decisions
International Data Transfer Agreements (IDTAs)
Standard Contractual Clauses approved by the UK ICO
These safeguards protect your personal data and rights.
7. Data Retention
We keep your data only as long as necessary for the purposes described in this policy.
Examples include:
Order and financial records: up to 6 years (legal requirement)
Customer account information: retained until you request deletion
Marketing data: retained until you unsubscribe
Analytics data: typically retained up to 26 months
Data is securely deleted or anonymised once no longer needed.
8. Data Security
We take appropriate technical and organisational steps to secure your data and prevent loss, misuse, unauthorised access, or alteration.
However, no online system is entirely risk-free.
9. Your Rights Under UK GDPR
You have the right to:
Access the personal data we hold about you
Request corrections to inaccurate data
Request deletion of your personal data (where applicable)
Restrict or object to certain types of processing
Request a copy of your data in a portable format
Withdraw consent at any time (e.g., for marketing)
To exercise your rights, contact: [email protected]
We may request identity verification before responding.
10. Third-Party Links
The Website may contain links to external sites.
We are not responsible for the content or privacy practices of those sites.
11. Children’s Privacy
The Website is not intended for users under the age of 13.
We do not knowingly collect personal data from children.
If you believe a child has provided personal data, please contact us so we can remove it.
12. Cookies
Cookies are small text files placed on your device by websites you visit. They help the Website function and provide enhanced user experience. Strictly necessary cookies are allowed without your consent. All other cookies require your approval via the cookie banner.
We use the following categories of cookies:
Strictly necessary cookies
Enable essential site features such as account login and secure checkout.
Performance cookies
Help us understand how visitors use the Website (e.g., analytics).
These do not directly identify individuals.
Targeting cookies
Used to identify users across sites and deliver relevant advertising.
Often set by advertising partners.
Functionality cookies
Remember preferences such as language, time zone, and enhanced content settings.
Unclassified cookies
Cookies that are in the process of being reviewed and categorised.
You can manage your cookie preferences at any time through your browser settings or the cookie banner.
13. Changes to This Privacy Policy
We may update this Privacy Policy periodically.
When changes occur:
The “Effective date” will be updated
The new version will be published on this page
Significant changes may be communicated by email
Please review this page periodically to stay informed.
14. Contact Us
If you have any questions about this Privacy Policy or how your data is handled, you can contact us:
Email: [email protected]
Phone: +44 114 267 7723
Address: Unit 15 Parkwood Business Park, Parkwood Road, Sheffield, S3 8AL, United Kingdom
Contact form: www.agnesandcat.org/contact
